10868 matches found
StarUML - WinGraphviz.dll ActiveX Buffer Overflow
StarUML - WinGraphviz.dll ActiveX Buffer Overflow Exploit Title: StarUML WinGraphviz.dll ActiveX buffer overflow vulnerability Date: 03.8.2013 Exploit Author: d3b4g Vendor Homepage:http://staruml.sourceforge.net/en/ Software Link: http://staruml.sourceforge.net/en/ Tested on: Windows XP SP3 About...
StarUML - 'WinGraphviz.dll' ActiveX Buffer Overflow
Exploit Title: StarUML WinGraphviz.dll ActiveX buffer overflow vulnerability Date: 03.8.2013 Exploit Author: d3b4g Vendor Homepage:http://staruml.sourceforge.net/en/ Software Link: http://staruml.sourceforge.net/en/ Tested on: Windows XP SP3 About StarUML -------------- StarUML is an open source...
TEC-IT TBarCode - OCX ActiveX Control (TBarCode4.ocx 4.1.0) Crash (PoC)
TEC-IT TBarCode - OCX ActiveX Control TBarCode4.ocx 4.1.0 Crash PoC Exploit Title: TEC-IT TBarCode OCX ActiveX Control TBarCode4.ocx 4.1.0 dos poc Date: 29.7.2013 Exploit Author: d3b4g Vendor Homepage:http://www.tec-it.com/en/start/Default.aspx Software Link:...
TEC-IT TBarCode - OCX ActiveX Control (TBarCode4.ocx 4.1.0) Crash (PoC)
Exploit Title: TEC-IT TBarCode OCX ActiveX Control TBarCode4.ocx 4.1.0 dos poc Date: 29.7.2013 Exploit Author: d3b4g Vendor Homepage:http://www.tec-it.com/en/start/Default.aspx Software Link: http://www.tec-it.com/en/start/Default.aspx Tested on: Windows XP SP3 Exception Code: ACCESSVIOLATION...
TEC-IT TBarCode OCX ActiveX Control Buffer Overflow
Exploit Title: TEC-IT TBarCode OCX ActiveX Control TBarCode4.ocx 4.1.0 BOF poc Date: 29.7.2013 Exploit Author: d3b4g Vendor Homepage:http://www.tec-it.com/en/start/Default.aspx Software Link: http://www.tec-it.com/en/start/Default.aspx Tested on: Windows XP SP3 Exception Code: ACCESSVIOLATION...
DSquare Exploit Pack: D2SEC_MICWA
Name| d2secmicwa ---|--- CVE| CVE-2013-2368 Exploit Pack| D2ExploitPack Description| HP LoadRunner micWebAjax.dll ActiveX NotifyEvent Buffer Overflow Vulnerability Notes|...
DSquare Exploit Pack: D2SEC_LRWEB2
Name| d2seclrweb2 ---|--- CVE| CVE-2013-2370 Exploit Pack| D2ExploitPack Description| HP LoadRunner lrFileIOService ActiveX WriteFileBinary Remote Code Execution Vulnerability Notes|...
Hewlett-Packard LoadRunner lrFileIOService ActiveX Control WriteFileBinary Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP LoadRunner. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the lrFileIOServic...
WellinTech KingView ActiveX Vulnerabilities
OVERVIEW This advisory is a follow-up to the alert titled ICS-ALERT-13-256-01 WellinTech KingView ActiveX VulnerabilitiesICS-ALERT-13-256-01 WellinTech KingView ActiveX Vulnerabilities, http://ics-cert.us-cert.gov/alerts/ICS-ALERT-13-256-01, Web site last accessed October 22, 2013. that was...
HP LoadRunner lrFileIOService ActiveX WriteFileString Remote Code Execution
This module exploits a vulnerability on the lrFileIOService ActiveX, as installed with HP LoadRunner 11.50. The vulnerability exists in the WriteFileString method, which allow the user to write arbitrary files. It's abused to drop a payload embedded in a dll, which is later loaded through the Ini...
HP LoadRunner lrFileIOService ActiveX Remote Code Execution
This module exploits a vulnerability on the lrFileIOService ActiveX, as installed with HP LoadRunner 11.50. The vulnerability exists in the WriteFileBinary method where user provided data is used as a memory pointer. This module has been tested successfully on IE6-IE9 on Windows XP, Vista and 7,...
CA Multiple Products gui_cm_ctrls.ocx ActiveX Control Arbitrary Code Execution
The remote host has the CA guicmctrls.ocx ActiveX control installed that is affected by an arbitrary code execution vulnerability due to insufficient verification of function arguments. By tricking a user into opening a specially crafted web page, a remote attacker may be able to execute arbitrar...
Microsoft Internet Explorer内存破坏漏洞(CVE-2013-3146)（MS13-055)
BUGTRAQ ID: 60965 CVECAN ID: CVE-2013-3146 Windows Internet Explorer，简称MSIE，是微软公司推出的一款网页浏览器。 Microsoft Internet Explorer 7, 8, 9, 10不正确地访问内存中的对象时，存在远程执行代码漏洞。成功利用导致在当前用户的上下文执行任意代码，失败导致浏览器崩溃。 0 Microsoft Internet Explorer 6 - 10 临时解决方法： 将 Internet 和本地 Intranet 安全区域设置设为“高”，以便在这些区域中阻止 ActiveX 控件和活动脚本...
Microsoft Internet Explorer内存破坏漏洞(CVE-2013-3145)
BUGTRAQ ID: 60964 CVECAN ID: CVE-2013-3145 Windows Internet Explorer，简称MSIE，是微软公司推出的一款网页浏览器。 Microsoft Internet Explorer 7, 8, 9, 10不正确地访问内存中的对象时，存在远程执行代码漏洞。成功利用导致在当前用户的上下文执行任意代码，失败导致浏览器崩溃。 0 Microsoft Internet Explorer 6 - 10 临时解决方法： 将 Internet 和本地 Intranet 安全区域设置设为“高”，以便在这些区域中阻止 ActiveX 控件和活动脚本...
Microsoft Internet Explorer内存破坏漏洞(CVE-2013-3147)（MS13-055)
BUGTRAQ ID: 60966 CVECAN ID: CVE-2013-3147 Windows Internet Explorer，简称MSIE，是微软公司推出的一款网页浏览器。 Microsoft Internet Explorer 7, 8, 9, 10不正确地访问内存中的对象时，存在远程执行代码漏洞。成功利用导致在当前用户的上下文执行任意代码，失败导致浏览器崩溃。 0 Microsoft Internet Explorer 6 - 10 临时解决方法： 将 Internet 和本地 Intranet 安全区域设置设为“高”，以便在这些区域中阻止 ActiveX 控件和活动脚本...
Novell iPrint Client IPP Response URI handling buffer overflow
Added: 07/05/2013 CVE: CVE-2013-1091 BID: 59612 OSVDB: 92938 Background Novell iPrint is an application which allows users to install and manage printers. Novell iPrint installs the Novell iPrint Control ActiveX control named ienipp.ocx. Problem A buffer overflow vulnerability within the handling...
SAS Integration Technologies Client ActiveX Stack Buffer Overflow
The version of the SAS Integration Technologies Client installed on the remote host is affected by a stack-based buffer overflow condition in the 'SASspk.dll' ActiveX control due to improper validation of user-supplied input to the RetrieveBinaryFile function via the 'bstFileName' parameter. An...
McAfee Virtual Technician ActiveX Control Insecure Method Exposure (CVE-2012-5879)
An insecure method exposure vulnerability has been reported in McAfee Virtual Technician...